Bring in AI safely.
Without compromise.

Built into your existing roles and permissions, with full control over access, usage and data — transparent and traceable at all times

Compliance at a glance:

The essentials in six points.

EU hosting

All data stays in the EU. Nothing is transferred to outside servers.

Zero retention

Your requests are not stored and not used to train models.

EU AI Act

Designed from the ground up for the requirements of the EU AI Act.

ISO 27001 hosting

Built to enterprise security standards.

Audit logging

Every activity fully traceable.

Multi-layer guardrails

Protection against prompt injection and data leaks.

Your professional secrecy stays protected.

Confidential content is protected from unauthorised access: only authorised people are granted access. Everyone involved in the processing is bound to confidentiality. This is how we support the confidential handling of private secrets as relevant in the context of Section 203 of the German Criminal Code.

Law, tax and audit firms

For lawyers, notaries, tax advisers and auditors.

  • Client confidentiality under Section 203 of the German Criminal Code upheld
  • Duty of confidentiality set out by contract
  • No training on client data

Healthcare

For hospitals, practices and care facilities.

  • Medical confidentiality under Section 203 of the German Criminal Code upheld
  • Health data under Article 9 GDPR stays in the EU
  • On-premise deployment available

Public sector

For municipal, state and federal authorities.

  • Protection of private secrets under Section 203 of the German Criminal Code
  • Hosting in the EU or on-premise
  • Roles from Active Directory and LDAP
Learn more

Your company.
Your rules.

You decide who may use, edit and pass on what:
for individual people, whole groups or the entire organisation.

Groups and roles Mirroring how your company is organised

Members belong to groups such as Sales or Controlling. A role applies to the whole organisation or to a single group, and you can create your own roles. New employees arrive straight from your identity provider via SCIM 2.0.

Sharing and publishing Who may pass skills on

For skills, connectors and workspaces, you set separately who may use, edit, share and publish them: for individual colleagues, a group or the whole organisation.

Traceability Complete audit trails

Every AI interaction is logged — by user, role, skill and workflow. For compliance, cost allocation and internal governance.

Roles and permissions Example: Sales group
AdminOrganisation Group adminHead of sales MemberSales team
Skills
Useyesyesyes
Edityesyesno
Share with colleaguesyesyesno
Publish to the groupyesyesno
Publish to the whole organisationyesnono
Connectors to your systems
Useyesyesyes
Attach to skillsyesyesno
Set approval rules for actionsyesyesno
Group and organisation
Manage group membersyesyesno
Assign rolesyesnono
Set models and budgetsyesnono

Default roles in HUB.KI. Every role can be adjusted, and you can create your own.

Where does HUB.KI run?

HUB.KI fits your IT strategy, not the other way round. A quick start, your own cloud instance or a full on-premise deployment: you choose the model that matches your needs for security, scale and control.

Software as a service (SaaS)
  • Access to state-of-the-art LLMs
  • Runs in a European cloud
  • Nothing to install, ready at once

The fastest route
to AI that does real work

For teams and companies that want to try AI quickly, put it to work and scale it — without running the infrastructure themselves.

Private/public cloud
  • A dedicated instance with separate data storage
  • Every model available — including your own
  • Extensive customisation possible

Your own AI platform
in the cloud

For companies with higher demands on data protection, integration and customisation that still want the flexibility of the cloud.

On-premise
  • Runs on your own infrastructure
  • Modern open-source LLMs
  • Full control over data flows and security

Full control over data,
models and processes

The right choice for organisations with strict compliance rules, sensitive data, or a need for complete technological sovereignty.

Data that is in Europe
and stays there.

Every model you reach through HUB.KI runs on infrastructure inside the European Economic Area — under EU law, with real data processing agreements, and with optional zero data retention.

Hosted exclusively in the EEA

Data centres in Germany, France, Finland and the Netherlands — operated under EU law.

  • ISO 27001 certified data centres
  • No data flows to third countries
Fully GDPR-compliant

A data processing agreement under Article 28, technical and organisational measures, a deletion policy, auditability. No checklist, no rework, no shadow IT.

  • Data processing agreement signed in two clicks
  • Technical and organisational measures documented
Made for professions bound by confidentiality

Curated models for law firms, medical practices, notaries and tax advisers, with non-storage guaranteed by contract.

  • Processing in line with Section 203 of the German Criminal Code
  • Non-storage guaranteed by contract
Your data is not used.

Your prompts, documents and outputs are not used for model training, fine-tuning or evaluation. Not by us, and not by the model providers.

  • Ruled out by contract with every vendor
  • No fine-tuning, no RLHF, no evaluation
Back to top

A platform you can trust.

HUB.KI is built for safe use inside a company — GDPR-compliant, controllable and designed to enterprise security standards.

Complete traceability through change tracking
Your data is not used to train AI
Made in Germany – hosted where you need it
GDPR-compliant & EU AI Act ready
GET IN TOUCH

How your systems connect: Integrations · How getting started works: KIckstart